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Amended claims follow; 

1 . (Currently Amended) A method executed utilizing a computer including a 

tangible computer readable medium for prioritized network security, comprising: 
[[(a)]] identifying a set of policies, each policy having a condition associated therewith; 
[[(b)]] determining whether the conditions are met; 

determining whether a user confirms activation of the policies; and 
[[(c)]] activating the policies whose associated conditions are determined to be me t if the 

coni'irr 0>, cj \ ' n i 
[[(d)]] wherein the conditions repre ss nh u e based on a pnouu of the policy: 
[[(e)]] wherein a first policy with a higher priority has a first condition associated 

therewith that is different from a second condition associated with a second policy 

with a lower priority such that the first policy and second policy are activated 

under different priority-related conditions; 
[[(f)]] wherein the activation of the policies includes: 

adding the policies to a set of a plurality of active policies, and executing 

security actions associated with the active policies if associated limits are met; 

and 

identifying currently executed security actions, determining whether a 

conflict exists between the currently executed security actions, and resolving any 

conflicts between the currently executed security actions; 
[[(g)]] wherein the conditions i nciude are based on a time factor, the time factor including 

at least one of a timeframe, a predetermined time period, and a time li mit; 
[[(h)]] wherein the conditions inefade are based on a source of the policies; 
[[{!)]] wherein the conditions inekrdeare based on a severity of security actions 

associated with the policies. 



2, 



(Cancelled) 
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3. (Cancelled) 

4. (Original) The method as recited in claim i, and further comprising updating the 
set of policies. 

5. (Original} The method as recited in claim 4, wherein the updating includes 
receiving another inactive policy, determining whether the user accepts the 
inactive policy, and adding the inactive policy to the set if the user accepts the 
inactive policy. 

6. (Cancelled) 

?. (Previously Presented) The method as reeded in claim t, and further comprising 
determining whether the conditions associated with the active policies are still 
met, and de-activating the active policies if the associated conditions are not met. 

8. (Cancelled) 

9. (Cancelled) 

10. (Cancelled) 
1 J . (Cancelled) 

1 2. (Currently Amended) A computer program product embodied on a tangible 

computer readable medium for prioritized network security, comprising: 
[[(a)]] computer code for identifying a set of policies, each policy having a condition 

a s soc rated there wi th ; 
[[(b)]] computer code for determining whether the conditions ate met; 

cojnj^rtera 'de fpj deiem mm ' i i < ttjon.Mthe,p,Qjicies; 

and 
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[[(c)]] computer code for activating the policies whose associated conditions are 

determined to be met i f the user con f ir m.s the a c ti vation; 
[[(d)]] wherein the conditions r e pr e s s m are based on a prioriis of the policy; 
[[(e)]] wherein a first policy with a higher priority has a first condition associated 

therewith that is different from a second condition associated with a second policy 

with a lower priority such that the first policy and second policy are activated 

under different priority-related conditions; 
[[(f)]] wherein the activation of the policies involves: 

computer code for adding the policies to a set of a plurality of acti ve 

policies, and executing security actions associated with the active policies if 

associated limits are met; and 

computer code for identifying currently executed security actions, 

determining whether a conflict exists between the currently executed security 

actions, and resolving any conflicts between the currently executed security 

actions; 

[[(g)]] wherein the conditions keM eare based on a time factor, the time factor including 
at least one of a timeframe, a predetermined time period, and a time limit; 

| it h j j j x\ herein the conditions w t e l t - td ^arej>a.sed on a source of the policies; 

[[(*)]] wherein the conditions inektde are based on a severity of security actions 
associated with the policies. 

13. (Cancelled) 

14. (Cancelled) 

15. (Original) The computer program product as recited in claim 12, and further 
comprising computer code tor updating the set of policies. 

1 6. f Original) The computer program product as recited in claim 1 5, wherein the 
updating includes receiving another inactive policy, determining whether the user 
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accepts the inactive policy, and adding the inactive policy to the set if the user 
accepts the inactive policy. 

17. (Cancelled) 

1 8. ( Previously Presented) The computer program product as recited in claim i 2, and 
further comprising computer code for determining whether the conditions 
associated with the active policies are still met, and de-activating the active 
policies if the associated conditions are not met. 

39. (Cancelled) 

20. (Cancelled) 

21. (Cancelled) 

22. (Cancelled) 

23. (Currently Amended) A system including a computer with a tangible computer 
readable medium for prioritized network security, comprising; 

[[(a)]] logic for identifying a set of policies, each policy having a condition associated 
therewith; 

logic for determining whether a user confirms activation of the policies; 
fl.0>)]] logic for determining whether the conditions are me t if the user confirms the 
activation ; and 

E[(c)33 logic for activating the policies whose associated conditions are determined to be 
met; 

[[(d)]] wherein the conditions repres e nt are based on a priority of the policy; 
[[(e)]] wherein a first policy with a higher priority has a first condition associated 

therewith that is different from a second condition associated with a second policy 
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with a lower priority such that the first policy and second policy are activated 
under different priority-related conditions; 
[[(f)]] wherein the activation of the policies involves: 

logic for adding the policies to a set of a plurality of active policies, and 
executing security actions associated with the active policies if associated limits 
are met; and 

logic for identifying currently executed security actions, determining 
whether a conflict exists between the currently executed security actions, and 
resolving any conflicts between the currently executed security actions; 

[[(g)]] wherein the conditions includ e are based on a time factor, the time factor including 
at least one of a timeframe, a predetermined time period, and a time limit; 

[[(h)]] wherein the conditions mefed eare based on a source of the policies; 

[[0)33 wherein the conditions wtektd eare based on a seventy of security actions 
associated with the policies. 

24. (Cancelled) 

25. (Cancelled) 

26. (Cancelled) 

27. (Cancelled) 

28. (Currently Amended} A method executed utilizing a computer including a 
tangible computer readable medium for prioritized network security, comprising; 

[[(a)]] identifying a set of policies, each policy having a condition associated therewith; 

dcteimmmg vxhethct , i firms acfri " on of the policies. 

[[(b)]] determining whether the conditions are met; and 

[[(c)]] activating the policies whose associated conditions are determined to he me t if the 
Msercon hj u tivatton: 
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[[(d)]] wherein the conditions g e pge s eat are based on an urgency associated with an. issue 
causing the policy to be activated; 

[[(e)33 wherein a first policy with a higher associated urgency has a first condition 

associated therewith that is different from a second condition associated with a 
second policy with, a lower associated urgency such that the first policy and the 
second policy are activated under different urgency-related conditions; 

[[(f)]] wherein the act ivation of the policies includes: 

adding the policies to a set of a plurality of active policies, and executing 
security actions associated with the active policies if associated limits are met; 
and 

identifying currently executed security actions, determining whether a 

conflict exists between the currently executed security actions, and resolving any 

conflicts between the currently executed security actions; 
[[(g)]] wherein the conditions tefekal eare based on a time factor, the time factor including 

at least one of a timeframe., a predetermined time period, and a time limit; 
[[(h)]] wherein the conditions meHttleare based on a source of the policies; 
[[(i)]] wherein the conditions inehidc are based on a severity of security actions 

associated with the policies. 

29. (Currently Amended) A method executed utilizing a computer including a 

tangible computer readable medium for providing network security, comprising: 
[[(a)33 identifying a set of a plurality of inactive policies each including a security action, 

a condition for activating the policy, and a limit for triggering the security action 

if the policy is active; 
[[(b)]] updating the set of inac tive pol icies including: 

HO)]] receiving another inactive policy, 

[[(»)]] determining whether {[the ]|a user accepts the inactive policy, and 
(Suit)]] adding the inactive policy to the set if the user accepts the inactive policy; 

[[(c)]] determining whether the conditions are met for the inactive policies; 

[[(d)]] determining whether [[a]]the user confirms the activation of the inacti ve policies 
if the associated conditions are met; and 
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[[(e)]] activating the inactive policies if the user confirms, the activation including: 
[[(i)]] adding the inactive policies to a set of a plurality of active policies, 
[[(ii)]] detennining whether the conditions associated with the active policies are 
still met, 

[[(in)]] de-activating the active policies if the associated conditions are not met, 
and 

[[(iv)'J'J executing the security actions associated with the active policies if the 
associated conditions are met and the limits are met, the execution of the 
security actions including: 

[[( 1 )]] identifying currently executed security actions, 

[[{2)]] determining whether a conflict exists between the currently 

executed security actions, and 
[[(3)]] resolving any conflicts between the currently executed security 

actions; 

[[(f)]] wherein the conditions ine-ktdeare based on a time factor, the time factor including 
at least one of a timeframe, a predetermined time period, and a time limit; 

[[(g)]] wherein the conditions memd-* ire based on a source of the policies; 

[[(h)]] wherein the conditions hietndeare .based on a severity of security actions 
associated with the policies. 

30. (Previously Presented) The method as recited in claim 1 , wherein the policies 
include low priority policies that are default policies which do not expire. 

3 1 (Previously Presented) The method as recited in claim 1 , wherein the policies 
include medium priority policies that are valid for the predetermined time period. 



32. (Previously Presented) The method as recited in claim 3 1 , wherein the policies 
include high priority policies that are valid for another predetermined time period that is 
less than the predetermined time period associated with the medium priority policies. 
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33. (Previously Presented) The method as recited in claim I , wherein the identifying 
the set of policies, the determining whether the conditions are met, and the activating the 
policies are controlled locally. 

34. (Previously Presented) The method as recited in claim 1 , wherein the associated 
conditions of the policies dictate the manner in which the active policies are to be 
deactivated. 

35. (Previously Presented) The method as recited in claim 1, and further comprising 
determining whether one of the active policies is still active including determining 
whether the condition associated with the active policy is still met. 

36. (Previously Presented) The method as recited in claim 35. and further comprising 
de-activating the active policy if the associated condition is not. met and determining 
whether the de-activated policy is to he reused or discarded. 

37. (Previously Presented) The method as recited in claim 36, wherein an indication 
of the determination whether the de-activated policy is to be reused or discarded is stored 
with the associated condition. 

38. (New) The method as recited in claim L wherein the conditions are based on the 
detection of a predetermined amount of files of a certain type. 

39. (New) The method as recited in claim 1 , wherein the conditions are based on 
whether a v irus signature update is current. 



